Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3j2EENpD6rOBvp9Ko-Nh6Hm19qQ.roa
File: 3j2EENpD6rOBvp9Ko-Nh6Hm19qQ.roa (raw, json)
Hash identifier: oKnTGQ3nBQrrFFBrnuezzNsPMA0cIZ8TTkMxY+Y9zPs=
Subject key identifier: DE:3D:84:10:DA:43:EA:B3:81:BE:9F:4A:A3:E3:61:E8:79:B5:F6:A4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1F0BE230F59E17B1870EBBEC3C26F25E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3j2EENpD6rOBvp9Ko-Nh6Hm19qQ.roa
Signing time: Thu 30 Nov 2023 07:05:21 +0000
ROA not before: Thu 30 Nov 2023 07:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:1f0a:fc2c/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1f:0b:e2:30:f5:9e:17:b1:87:0e:bb:ec:3c:26:f2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 07:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de3d8410da43eab381be9f4aa3e361e879b5f6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:76:9e:2d:84:b2:34:d5:16:9a:36:29:35:18:
d8:1d:92:66:d4:40:12:08:b4:a0:87:0f:f3:d9:da:
24:98:1d:af:b1:09:c9:e3:79:da:df:34:0d:f1:68:
09:49:ba:3d:c5:10:bb:0c:f3:96:03:39:93:f7:4d:
19:53:f1:9f:6b:64:02:9f:7a:e3:e2:bb:f0:84:53:
50:ea:9b:77:3b:ec:e2:1f:a3:aa:2a:98:3f:9b:04:
1e:94:1b:01:bf:37:e9:8a:03:4e:5d:67:77:60:46:
7f:c7:6d:77:cd:10:6b:14:e8:42:9f:8d:c6:ec:11:
9a:d0:15:b6:11:20:0c:c0:96:fd:4f:17:64:9b:65:
10:42:ff:e5:42:c9:ad:a4:d6:60:04:e6:d8:6f:0e:
01:1e:37:d9:50:d3:57:2a:ed:2a:3d:77:cb:dc:f6:
de:26:29:ab:87:52:51:0e:23:cb:e1:38:02:ce:cc:
bc:6e:8e:3c:af:77:cd:bf:24:c8:ba:64:d2:f1:58:
19:8a:8b:26:76:1c:a9:b5:6b:b7:67:d3:a6:af:67:
7c:12:b9:80:a1:20:fa:8c:07:40:41:e1:13:d2:e3:
21:fc:76:e9:7e:cc:93:41:b5:7d:9e:96:b8:3e:30:
9a:40:f3:64:80:70:3f:29:c8:51:6c:e3:84:ef:1a:
f7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3D:84:10:DA:43:EA:B3:81:BE:9F:4A:A3:E3:61:E8:79:B5:F6:A4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/3j2EENpD6rOBvp9Ko-Nh6Hm19qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:d5:c6:f4:90:04:ac:2f:51:23:72:7e:81:f6:da:f3:3a:59:
e6:ff:89:7b:3b:66:29:bc:dd:de:b2:69:20:22:7a:bc:f1:50:
8a:6b:58:8e:17:96:5e:94:59:d1:fd:a0:ff:32:6f:64:0b:d8:
f9:40:2a:08:ff:58:10:6a:74:61:96:b2:d1:27:52:21:ec:e9:
f2:22:79:4e:e0:fc:ac:f7:8e:8e:31:1c:29:93:be:11:50:99:
0e:6a:0f:1c:86:43:f2:01:02:5a:8d:e5:53:42:8f:af:54:38:
16:72:fd:4e:b6:12:a7:39:5f:e4:d9:6e:6c:63:ea:e3:ce:13:
81:fb:1b:c2:7b:a4:3a:e1:e3:57:d9:9b:19:45:a3:79:48:8b:
87:02:4c:ee:45:db:74:39:6e:a2:3d:73:c2:2a:44:f9:fe:4d:
99:d3:18:e9:5e:63:11:0a:62:8e:1d:59:fa:77:bf:12:dd:80:
48:42:44:85:72:cb:38:5c:7c:93:c0:c8:ea:49:7b:b9:21:6b:
c1:68:74:58:d3:43:91:65:df:0c:c3:50:62:1c:a7:67:3a:33:
90:ac:e9:9c:1b:60:92:40:13:f4:6e:5c:51:7e:03:aa:8e:6c:
c6:e8:20:56:df:c3:4e:d7:c6:56:5d:23:90:3e:ea:2c:dd:5f:
3f:bd:8c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:56:48 2025 by rpki-client